{"id":"CVE-2019-2278","state":"PUBLISHED","title":"User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in MDM9607, MDM96","description":"User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SDM660","publishedAt":"2019-07-25T16:33:18.000Z","updatedAt":"2024-08-04T18:42:51.125Z","severity":null,"assigner":"qualcomm","products":["Qualcomm, Inc. Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile"],"affected":[{"vendor":"Qualcomm, Inc.","product":"Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile","versions":[{"version":"MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SDM660","status":"affected"}]}],"references":["https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:56.293Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/2xxx/CVE-2019-2278.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-2278","state":"PUBLISHED","datePublished":"2019-07-25T16:33:18.000Z","dateUpdated":"2024-08-04T18:42:51.125Z","assignerShortName":"qualcomm","assignerOrgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f","dateReserved":"2018-12-10T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SDM660"}],"affected":[{"vendor":"Qualcomm, Inc.","product":"Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile","versions":[{"version":"MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SDM660","status":"affected"}]}],"references":[{"url":"https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Improper Authentication in Boot","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"qualcomm","dateUpdated":"2019-07-25T16:33:18.000Z","orgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@qualcomm.com","ID":"CVE-2019-2278","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile","version":{"version_data":[{"version_value":"MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SDM660"}]}}]},"vendor_name":"Qualcomm, Inc."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SDM660"}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Improper Authentication in Boot"}]}]},"references":{"reference_data":[{"name":"https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin","refsource":"CONFIRM","url":"https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T18:42:51.125Z"}}]}}}